Get real-time updates on Telegram
CVE-2025-62250: digital experience platform 7.3, 7.4, 2023.q4.0 (+1 more affected versions); +3 more affected products
CVE-2025-62250. CVSS 3.1 base score 6.5 (MEDIUM, NVD). EPSS 0.00174 (percentile 0.06419), scored 17-Oct-2026.
Affected technology
digital experience platform · before 7.3 (exclusive)
liferay
digital experience platform · from 2023.q3.1 (inclusive), before 2023.q3.5 (exclusive)
liferay
digital experience platform · 7.3
liferay
digital experience platform · 7.3 · update fix_pack_1
liferay
digital experience platform · 7.3 · update fix_pack_2
liferay
digital experience platform · 7.3 · update service_pack_1
liferay
digital experience platform · 7.3 · update service_pack_2
liferay
digital experience platform · 7.3 · update service_pack_3
liferay
digital experience platform · 7.3 · update update1
liferay
digital experience platform · 7.3 · update update10
liferay
digital experience platform · 7.3 · update update11
liferay
digital experience platform · 7.3 · update update12
liferay
digital experience platform · 7.3 · update update13
liferay
digital experience platform · 7.3 · update update14
liferay
digital experience platform · 7.3 · update update15
liferay
digital experience platform · 7.3 · update update16
liferay
digital experience platform · 7.3 · update update17
liferay
digital experience platform · 7.3 · update update18
liferay
digital experience platform · 7.3 · update update19
liferay
digital experience platform · 7.3 · update update2
liferay
digital experience platform · 7.3 · update update20
liferay
digital experience platform · 7.3 · update update21
liferay
digital experience platform · 7.3 · update update22
liferay
digital experience platform · 7.3 · update update23
liferay
digital experience platform · 7.3 · update update24
liferay
digital experience platform · 7.3 · update update25
liferay
digital experience platform · 7.3 · update update26
liferay
digital experience platform · 7.3 · update update27
liferay
digital experience platform · 7.3 · update update28
liferay
digital experience platform · 7.3 · update update29
liferay
digital experience platform · 7.3 · update update3
liferay
digital experience platform · 7.3 · update update30
liferay
digital experience platform · 7.3 · update update31
liferay
digital experience platform · 7.3 · update update32
liferay
digital experience platform · 7.3 · update update33
liferay
digital experience platform · 7.3 · update update34
liferay
digital experience platform · 7.3 · update update35
liferay
digital experience platform · 7.3 · update update4
liferay
digital experience platform · 7.3 · update update5
liferay
digital experience platform · 7.3 · update update6
liferay
digital experience platform · 7.3 · update update7
liferay
digital experience platform · 7.3 · update update8
liferay
digital experience platform · 7.3 · update update9
liferay
digital experience platform · 7.4
liferay
digital experience platform · 7.4 · update update1
liferay
digital experience platform · 7.4 · update update10
liferay
digital experience platform · 7.4 · update update11
liferay
digital experience platform · 7.4 · update update12
liferay
digital experience platform · 7.4 · update update13
liferay
digital experience platform · 7.4 · update update14
liferay
digital experience platform · 7.4 · update update15
liferay
digital experience platform · 7.4 · update update16
liferay
digital experience platform · 7.4 · update update17
liferay
digital experience platform · 7.4 · update update18
liferay
digital experience platform · 7.4 · update update19
liferay
digital experience platform · 7.4 · update update2
liferay
digital experience platform · 7.4 · update update20
liferay
digital experience platform · 7.4 · update update21
liferay
digital experience platform · 7.4 · update update22
liferay
digital experience platform · 7.4 · update update23
liferay
digital experience platform · 7.4 · update update24
liferay
digital experience platform · 7.4 · update update25
liferay
digital experience platform · 7.4 · update update26
liferay
digital experience platform · 7.4 · update update27
liferay
digital experience platform · 7.4 · update update28
liferay
digital experience platform · 7.4 · update update29
liferay
digital experience platform · 7.4 · update update3
liferay
digital experience platform · 7.4 · update update30
liferay
digital experience platform · 7.4 · update update31
liferay
digital experience platform · 7.4 · update update32
liferay
digital experience platform · 7.4 · update update33
liferay
digital experience platform · 7.4 · update update34
liferay
digital experience platform · 7.4 · update update35
liferay
digital experience platform · 7.4 · update update36
liferay
digital experience platform · 7.4 · update update37
liferay
digital experience platform · 7.4 · update update38
liferay
digital experience platform · 7.4 · update update39
liferay
digital experience platform · 7.4 · update update4
liferay
digital experience platform · 7.4 · update update40
liferay
digital experience platform · 7.4 · update update41
liferay
digital experience platform · 7.4 · update update42
liferay
digital experience platform · 7.4 · update update43
liferay
digital experience platform · 7.4 · update update44
liferay
digital experience platform · 7.4 · update update45
liferay
digital experience platform · 7.4 · update update46
liferay
digital experience platform · 7.4 · update update47
liferay
digital experience platform · 7.4 · update update48
liferay
digital experience platform · 7.4 · update update49
liferay
digital experience platform · 7.4 · update update5
liferay
digital experience platform · 7.4 · update update50
liferay
digital experience platform · 7.4 · update update51
liferay
digital experience platform · 7.4 · update update52
liferay
digital experience platform · 7.4 · update update53
liferay
digital experience platform · 7.4 · update update54
liferay
digital experience platform · 7.4 · update update55
liferay
digital experience platform · 7.4 · update update56
liferay
digital experience platform · 7.4 · update update57
liferay
digital experience platform · 7.4 · update update58
liferay
digital experience platform · 7.4 · update update59
liferay
digital experience platform · 7.4 · update update6
liferay
digital experience platform · 7.4 · update update60
liferay
digital experience platform · 7.4 · update update61
liferay
digital experience platform · 7.4 · update update62
liferay
digital experience platform · 7.4 · update update63
liferay
digital experience platform · 7.4 · update update64
liferay
digital experience platform · 7.4 · update update65
liferay
digital experience platform · 7.4 · update update66
liferay
digital experience platform · 7.4 · update update67
liferay
digital experience platform · 7.4 · update update68
liferay
digital experience platform · 7.4 · update update69
liferay
digital experience platform · 7.4 · update update7
liferay
digital experience platform · 7.4 · update update70
liferay
digital experience platform · 7.4 · update update71
liferay
digital experience platform · 7.4 · update update72
liferay
digital experience platform · 7.4 · update update73
liferay
digital experience platform · 7.4 · update update74
liferay
digital experience platform · 7.4 · update update75
liferay
digital experience platform · 7.4 · update update76
liferay
digital experience platform · 7.4 · update update77
liferay
digital experience platform · 7.4 · update update78
liferay
digital experience platform · 7.4 · update update79
liferay
digital experience platform · 7.4 · update update8
liferay
digital experience platform · 7.4 · update update80
liferay
digital experience platform · 7.4 · update update81
liferay
digital experience platform · 7.4 · update update82
liferay
digital experience platform · 7.4 · update update83
liferay
digital experience platform · 7.4 · update update84
liferay
digital experience platform · 7.4 · update update85
liferay
digital experience platform · 7.4 · update update86
liferay
digital experience platform · 7.4 · update update87
liferay
digital experience platform · 7.4 · update update88
liferay
digital experience platform · 7.4 · update update89
liferay
digital experience platform · 7.4 · update update9
liferay
digital experience platform · 7.4 · update update90
liferay
digital experience platform · 7.4 · update update91
liferay
digital experience platform · 7.4 · update update92
liferay
digital experience platform · 2023.q4.0
liferay
digital experience platform · 2023.q4.1
liferay
liferay portal · from 7.0.0 (inclusive), before 7.4.3.132 (exclusive)
liferay
Portal · 7.4.0 through 7.4.3.132
Liferay
DXP · 7.3.10 through 7.3.10-u35, 7.4.13 through 7.4.13-u92, 2023.Q3.1 through 2023.Q3.4, 2023.Q4.0
Liferay
Description’s affected range: through 7.4.3.132
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Remote attackers can send malicious data to the Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions that will treat it as trusted data via unauthenticated cluster messages. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and integrity impact as low; availability impact as none.
- CWE
- CWE-346
- CCR priority
- 26.0 /100 (P4)
- CVSS 3.1
- 6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · NVD
- EPSS
- 0.00174 · percentile 0.06419 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 22:50:08.248207+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-62250.html